Extracted

• • Target

    d883837202491b84ca4d766d404f777e1eed5cbbf3154cc003e8fdfbc59d130b

  • Size

    217KB

  • MD5

    535c4ed4c57cfe7295b6fff6b7a0b677

  • SHA1

    4d833f9cb9e5d2b95d57cad3aecd1b50666fdf24

  • SHA256

    d883837202491b84ca4d766d404f777e1eed5cbbf3154cc003e8fdfbc59d130b

  • SHA512

    e1683fe0d5bea7faf34850317b9000d93842382a2d6884829811018445e0cff6b543f45ebf17ddbecd8b388ea117c86bf43247aa112235d6fd0bb35e4a96f91a

  • SSDEEP

    3072:gliRaiFzW0qu7b4ee8fwmGzPMWxS+bsqLCX3knb95IcWdXCY9bTAIrFldG0cXxO:gliRawNveMwTDM4RVCkbSCY9fIk

  Score

  10^/10

  redline@p1discoveryinfostealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Uses the VBS compiler for execution

  • Suspicious use of SetThreadContext

  behavioral1behavioral2